Loading story…
A critical CVSS 10.0 vulnerability in Wazuh Manager 5.0 allows a malicious or compromised agent to inject unauthorized OpenSearch bulk operations through the inventory_sync pipeline, enabling deletion of alerts, tampering with forensic evidence, and manipulation of backend SIEM data. The flaw stems from Wazuh forwarding the agent-controlled DataValue.index flatbuffer field into bulk NDJSON requests without proper escaping, causing injected delete, index, or update actions to run with the manager’s high-privilege OpenSearch credentials. Public reporting said the issue affects wazuh-manager from 5.0.0-beta1, while 4.x branches are not affected because they do not include the vulnerable inventory synchronization path.
Researchers and public advisories said the exposure can be especially severe in deployments where wazuh-authd allows anonymous agent enrollment, potentially lowering the barrier to exploitation from authenticated abuse to practical unauthenticated access in some environments. Reported impacts include cross-index document deletion, post-compromise cleanup, persistent payload injection into saved dashboard objects, and interference with incident response and investigations. Wazuh fixed the issue in 5.0.0-beta3, and the vulnerability is tracked as GHSA-ff9g-85jq-r3g3; defenders were urged to upgrade, disable anonymous enrollment, reduce indexer privileges, and review logs for unauthorized index modifications.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
Wazuh released a fix for the critical vulnerability in version 5.0.0-beta3 by enforcing proper character escaping in the affected processing path. The issue is tracked in GitHub advisory GHSA-ff9g-85jq-r3g3.
The vulnerability affects wazuh-manager starting from version 5.0.0-beta1, where agent-controlled DataValue.index input is forwarded into OpenSearch bulk NDJSON requests without proper escaping. Wazuh 4.x branches are described as unaffected because they do not include the inventory synchronization path.
Public reporting disclosed full technical details and proof-of-concept exploit code for a critical CVSS 10 Wazuh vulnerability that allows unauthorized OpenSearch bulk operations, alert tampering, and deletion of forensic evidence. The disclosure also highlighted that exploitation can be easier in deployments allowing anonymous agent enrollment.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
4 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcesecurityonline.info
Open sourcefreebuf.com
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A critical vulnerability tracked as **CVE-2026-56699** affects **Wazuh Manager** versions before `5.0.0-beta3`, allowing an enrolled agent to inject arbitrary **NDJSON** operations into `inventory_sync` requests. The flaw stems from improper escaping of the agent-controlled `DataValue.index` field while the manager builds OpenSearch bulk requests, creating a path for remote exploitation under the manager’s own administrative credentials. Successful exploitation can allow attackers to perform `delete`, `index`, and `update` actions in OpenSearch, enabling document deletion, alert tampering, and manipulation of SIEM state across agents. The issue is classified as **CWE-74**, and the published remediation is to upgrade Wazuh Manager to **`5.0.0-beta3` or later**.
Jul 15, 2026
WatchGuard disclosed multiple vulnerabilities in **WatchGuard Agent on Windows** affecting version `1.25.02.0000` and earlier, including local privilege escalation flaws and stack-based buffer overflows in the Agent Discovery Service. The issues are tracked as `CVE-2026-6787`, `CVE-2026-6788`, `CVE-2026-41288`, `CVE-2026-41286`, and `CVE-2026-41287`, with one advisory describing a chained set of agent service weaknesses that can allow escalation to **SYSTEM** privileges. Separate advisories also detail two buffer overflow variants in the Windows Agent Discovery Service that can trigger **denial of service**, expanding the impact beyond privilege abuse to service disruption. The Canadian Centre for Cyber Security echoed the vendor notice and urged organizations using affected WatchGuard Agent deployments to review the advisories and apply the vendor’s updates and mitigations.
Jun 29, 2026
WatchGuard patched two critical vulnerabilities in its Windows WatchGuard Agent that allow unauthenticated remote code execution: `CVE-2026-57909` (CVSSv4 9.4) and `CVE-2026-57910` (CVSSv4 9.3). `CVE-2026-57909` is a path-traversal flaw exploitable by an attacker on an adjacent network, while `CVE-2026-57910` stems from improper authentication in the agent's UDP discovery and command service. An attacker exploiting `CVE-2026-57910` can invoke the `TaskExecute` handler to make an affected agent download and run an attacker-controlled program with elevated, potentially `SYSTEM`, privileges. All Windows Agent releases before version `1.25.13.0000` are affected; organizations should upgrade to `1.25.13.0000` or later. WatchGuard reported no known active exploitation or public proof-of-concept at disclosure.
Aug 27, 2026